79322803

Date: 2025-01-02 05:01:49
Score: 0.5
Natty:
Report link

Try this

let list = toscalar(_GetWatchlist('...........')
| summarize make_list(SearchKey));
AzureActivity
| where ipv4_is_in_any_range(tostring(CallerIpAddress), list)
Reasons:
  • Whitelisted phrase (-1): Try this
  • Low length (1):
  • Has code block (-0.5):
  • Low reputation (1):
Posted by: Jeevan Kumar Seerapu